--- title: "Hmad (@hammaadmughal) | Hashnode" description: "Notes. Labs. Writeups. My Cybersecurity Journey. Read the latest articles by Hmad on Hashnode." url: "https://hashnode.com/@hammaadmughal" --- @hammaadmughal # Hmad @hammaadmughal · Joined May 2025 Notes. Labs. Writeups. My Cybersecurity Journey [Website](https://gravatar.com/hammaadm) ### [eJPT - 4.1 CTF Introduction to the Web & HTTP Protocol](https://hmadsec.hashnode.dev/ejpt-41-ctf-introduction-to-the-web-and-http-protocol?utm_source=hashnode&utm_medium=feed) Question 1 Sometimes, important files are hidden in plain sight. Check the root ('/') directory for a file named 'flag.txt' that might hold the key to the first flag. For this task, we have been told that a website is running (on port 80) so we don... 2 min read · [hmadsec.hashnode.dev](https://hmadsec.hashnode.dev/ejpt-41-ctf-introduction-to-the-web-and-http-protocol?utm_source=hashnode&utm_medium=feed) [Jul 14, 2025](https://hashnode.com/posts/ejpt-41-ctf-introduction-to-the-web-and-http-protocol/6874ca937ba7b59866aa54b1) ### [eJPT - 4.1 Introduction to the Web & HTTP Protocol](https://hmadsec.hashnode.dev/ejpt-41-introduction-to-the-web-and-http-protocol?utm_source=hashnode&utm_medium=feed) Introduction Web applications are software programs that run on web servers and are accessible over the internet through web browsers. They are designed to provide interactive and dynamic functionality to users allowing them to perform various tasks,... 12 min read · [hmadsec.hashnode.dev](https://hmadsec.hashnode.dev/ejpt-41-introduction-to-the-web-and-http-protocol?utm_source=hashnode&utm_medium=feed) [Jul 14, 2025](https://hashnode.com/posts/ejpt-41-introduction-to-the-web-and-http-protocol/6874c48143509ec131cc74dc) ### [eJPT - 3.6 Social Engineering](https://hmadsec.hashnode.dev/ejpt-36-social-engineering?utm_source=hashnode&utm_medium=feed) Introduction In the context of penetration testing, social engineering is a technique used to manipulate individuals or employees within an organization to gain unauthorised access to sensitive information, systems of facilities. Social engineering w... 7 min read · [hmadsec.hashnode.dev](https://hmadsec.hashnode.dev/ejpt-36-social-engineering?utm_source=hashnode&utm_medium=feed) [Jul 12, 2025](https://hashnode.com/posts/ejpt-36-social-engineering/6874c20c0e478c394bce65a3) ### [eJPT - 3.5 CTF Post-Exploitation](https://hmadsec.hashnode.dev/ejpt-35-ctf-post-exploitation?utm_source=hashnode&utm_medium=feed) CTF 1 Question 1 The file that stores user account details is worth a closer look. (target1.ine.local) After doing an Nmap scan on the target, we can see that port 22 is open and running libssh for which there is a Metasploit module available to ex... 4 min read · [hmadsec.hashnode.dev](https://hmadsec.hashnode.dev/ejpt-35-ctf-post-exploitation?utm_source=hashnode&utm_medium=feed) [Jul 10, 2025](https://hashnode.com/posts/ejpt-35-ctf-post-exploitation/686f9584563e1e03261977ec) ### [eJPT - 3.5 Post-Exploitation](https://hmadsec.hashnode.dev/ejpt-35-post-exploitation?utm_source=hashnode&utm_medium=feed) Introduction Post-exploitation is the final phase of a penetration test. it consists of the tactics, techniques and procedures that attackers undertake after obtaining initial access on a target system. It involves what you do once you have gained an... 19 min read · [hmadsec.hashnode.dev](https://hmadsec.hashnode.dev/ejpt-35-post-exploitation?utm_source=hashnode&utm_medium=feed) [Jul 7, 2025](https://hashnode.com/posts/ejpt-35-post-exploitation/686b9779a17246efc4a49ba6)